{
 "public_id": "AIR-2026-0035",
 "incident_id": "2026-02-dji-romo-cloud-authorization-exposure",
 "date_disclosed": "2026-02-08",
 "date_occurred": "2026-02",
 "title": "DJI Romo cloud credentials granted one owner access to live camera, microphone and home-map data from nearly 7,000 other robot vacuums in 24 countries",
 "class": "responsible_disclosure",
 "attack_surface": "computer_use_agent",
 "initial_vector": "broken_authorization_cloud_api",
 "agent_capability_abused": [
  "camera_access",
  "microphone_access",
  "home_mapping",
  "remote_control"
 ],
 "target_product": "DJI Romo robot vacuum",
 "target_vendor": "DJI",
 "autonomy_level": "semi_autonomous",
 "impact_realized": false,
 "impact_type": [
  "privacy_violation",
  "information_disclosure"
 ],
 "blast_radius": "nearly 7,000 devices across 24 countries; live camera feeds, microphone audio, floor maps and status data",
 "cve": [],
 "taxonomy": {
  "owasp_asi": [],
  "mitre_atlas": [],
  "labels": [
   "broken_object_level_authorization",
   "embodied_agent",
   "in_home_surveillance",
   "found_via_ai_assistant",
   "hobbyist_discovery"
  ]
 },
 "defense_present": "per-device cloud credential scoping",
 "defense_bypassed": true,
 "fix_shipped": "reported to DJI",
 "primary_sources": [
  "https://www.popsci.com/technology/robot-vacuum-army/",
  "https://incidentdatabase.ai/cite/1389"
 ],
 "verified_quote": "But he soon discovered that the same credentials that allowed him to see and control his own device also provided access to live camera feeds, microphone audio, maps, and status data from nearly 7,000 other vacuums across 24 countries.",
 "confidence": "high",
 "notes": "Two agent stories in one. The vulnerability is a plain authorization failure in an embodied agent that owns a camera, a microphone and a floorplan of your house — the same exposure class as the 2024 Ecovacs record. The discovery is the newer part: Sammy Azdoufal found it with an AI coding assistant while trying to drive his vacuum with a game controller, which is what changes about vulnerability discovery when reverse engineering costs an afternoon. impact_realized false — researcher access only, disclosed to the vendor. AI Incident Database incident 1389.",
 "risk_category": "privacy",
 "risk_secondary": [
  "product_misuse"
 ],
 "risk_subcategory": "Unclassified",
 "risk_sub_secondary": [],
 "ai_entity": "not_ai",
 "agency": "ai_as_target",
 "agency_debatable": false,
 "agency_reason": "broken cloud authorization exposed camera, mic and map data",
 "vector_family": "other",
 "vector_detail": "broken_authorization_cloud_api",
 "guardrail_kind": [
  "unknown"
 ],
 "guardrail_outcome": "silent",
 "xrefs": {
  "aiid": [
   1389
  ],
  "atlas": [],
  "cve": [],
  "ghsa": []
 },
 "primary_asi": "none",
 "agent_framework": "unknown",
 "model_provider": "unknown",
 "model_name": "",
 "detection_mechanism": "unknown",
 "tool_access": "unknown",
 "financial_loss_band": "unknown",
 "eai_category": "sensitive_data_exposure",
 "eai_domain": "privacy",
 "eai_secondary": [],
 "eai_reason": "impact rule: sensitive_data_exposure",
 "asi_curated": [],
 "asi_scope": "out_of_scope",
 "asi_provenance": "out_of_scope",
 "asi_reason": "out of scope: not_ai: no ASI mechanism describes the failure",
 "submitted_by": "EAI Internal"
}